FractalAI Post-Quantum Proofs

io.github.johnInarti由 GitHub 账号 johnInarti 发布v0.1.3更新于 Oct 24, 2026

Post-quantum (ML-DSA-65/Dilithium-3) proof, provenance & AI-decision receipts, paid via x402.

已验证STDIO仅桌面金融安全与监控

概览

AI 生成的概览

一个本地 MCP 服务器,让助手验证后量子 ML-DSA-65 签名,并通过 x402 微支付购买签名、来源证明和 AI 决策存证服务。

可以做什么
免费验证后量子 ML-DSA-65/Dilithium-3 签名是否与公钥匹配,并返回有效性结论。获取付费资源的实时 x402 支付要求以及服务的发现清单。支付少量 USDC 购买对消息或哈希的后量子签名。购买内容来源证明封条,包含 drand 轮次、签名和链上锚定尝试。购买对 AI 代理所声明决策的存证,写入仅追加日志并返回可离线验证的签名。
适用场景
当你需要校验后量子签名,或希望为内容和代理决策取得付费的签名来源证明或决策回执时使用。免费的验证和结账工具可单独使用;付费工具仅在你愿意在 Base 上发送 USDC 时才有意义。
运行要求
作为本地 Node.js 进程通过 stdio 运行,需从 npm 包安装并先构建。需要访问 FractalAI 端点的网络,默认指向公开部署,可用环境变量 FRACTALAI_BASE_URL 覆盖。付费工具需要 Base 上的 USDC 余额和已确认的交易哈希;未声明需要账户或 API 密钥。
安装前请注意
付费工具按次收取 Base 上的 USDC(每次约 0.02 至 0.05 美元),需你自行发起真实转账并回传交易哈希,一个哈希只能购买一次调用。付费工具会使用服务器绑定的节点密钥写入链上锚定。签名只证明确切字节由该密钥签署,并不证明内容真实;存证只记录所声明的决策,不判断其是否正确。请求会发送至第三方端点。

安装

在 SourceWeft 中

  1. 打开 控制台中的 FractalAI Post-Quantum Proofs,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

FractalAI MCP Server

A Model Context Protocol (MCP) server that exposes FractalAI's live post-quantum cryptography and x402 micropayment capabilities as tools any MCP client (Claude Desktop, IDEs, agent frameworks) can call over stdio.

It talks to the real, public FractalAI deployment at https://fractalai.net.co — nothing here is mocked.

What it does

ToolCostWhat it does
verify_prooffreeVerify a post-quantum ML-DSA-65 / Dilithium-3 / NIST FIPS 204 signature against its public key. Returns { valid, verdict }.
x402_checkoutfreeReturn live x402 (HTTP 402) payment requirements for a paid resource — price, network, USDC asset, payTo, and the accepts[] entries. Also fetches the full .well-known/x402.json manifest.
pqc_sign$0.02 USDCBuy one ML-DSA-65 / Dilithium-3 signature over a message (its sha256 is signed) or a hex hash (signed directly).
seal_provenance$0.05 USDCBuy a PQC + drand provenance seal over content: a drand round + a self-contained ML-DSA-65 / Dilithium-3 signature + an on-chain anchor attempt (this server's node-bound Dilithium-2 key) over the content hash.
attest_decision$0.05 USDCSeal an AI agent's declared decision (input hash, output, model, timestamp) — chained in an append-only Black Box, anchored on-chain (VAID-1, node-bound Dilithium-2 key), and returned with a self-contained ML-DSA-65 / Dilithium-3 signature for independent offline verification.

Honest scope (read this)

  • The signature every tool here serves/verifies directly is ML-DSA-65 / Dilithium-3 (NIST FIPS-204, Cat-3). seal_provenance and attest_decision ALSO write a separate on-chain anchor (VAID-1) using this server's node-bound Dilithium-2 key — additive, not the signature returned to you.
  • Dilithium-3 is resistant to known classical and quantum attacks per NIST FIPS 204 — it is NOT "unbreakable". A signature proves the exact bytes you submitted were signed by this server's post-quantum key. It says nothing about the truthfulness of the signed content.
  • seal_provenance produces a provenance record, not a content audit.
  • attest_decision notarizes a decision as declared; it does not judge whether the decision was correct.
  • The paid tools run a real HTTP 402 flow. Without a payment_tx_hash they return the payment challenge (accepts[]) — they never fabricate a result.

Payment model (x402)

Paid tools are gated by x402: pay in USDC on Base to the service's treasury, then the tool returns the resource. This server uses the facilitator-less txHash settlement path, which needs no facilitator account:

  1. Call the tool once with no payment_tx_hash. You get back the accepts[] block: the exact USDC amount, the asset (USDC on Base), and the payTo treasury address.
  2. Send that USDC transfer on Base yourself.
  3. Call the tool again with payment_tx_hash set to the confirmed transaction hash. One txHash buys exactly one call (anti-replay is enforced server-side).

verify_proof and x402_checkout are always free.

Install & build

bash
cd integrations/mcpnpm installnpm run build

Configure in an MCP client

Claude Desktop (claude_desktop_config.json)

json
{  "mcpServers": {    "fractalai": {      "command": "node",      "args": ["/absolute/path/to/integrations/mcp/dist/index.js"]    }  }}

Any stdio MCP client

Run the built entrypoint: node dist/index.js. It speaks MCP over stdio; all logging goes to stderr so stdout stays a clean JSON-RPC channel.

Environment

  • FRACTALAI_BASE_URL — override the endpoint base (defaults to https://fractalai.net.co).

Example flows

Verify a signature (free):

json
{  "name": "verify_proof",  "arguments": {    "signed_message_b64": "<base64 of the exact bytes that were signed>",    "signature": "<base64 ML-DSA-65 / Dilithium-3 signature>",    "public_key": "<base64 ML-DSA-65 / Dilithium-3 public key>"  }}

Price a signature (free), then buy it (paid):

json
{ "name": "x402_checkout", "arguments": { "resource": "sign" } }
json
{ "name": "pqc_sign", "arguments": { "message": "hello world" } }

The first pqc_sign call (no payment_tx_hash) returns the payment challenge. Pay the USDC, then call again:

json
{  "name": "pqc_sign",  "arguments": { "message": "hello world", "payment_tx_hash": "0x…" }}

About FractalAI

FractalAI is an AI-native Layer 1 blockchain (chain id 62124) written in Rust with post-quantum cryptography (ML-DSA-65 / Dilithium-3 signatures, Kyber encryption). These x402 endpoints sell post-quantum proof, provenance and decision-attestation services to autonomous agents. See https://fractalai.net.co and the discovery manifest at https://fractalai.net.co/.well-known/x402.json.

License

MIT

来源:README.md,提交 b469d75

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

2
  1. v0.1.3最新Oct 9, 2026
  2. v0.1.2Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分